The tweets say that the attack came through the coinzilla advertising network.

I seem to recall a few of the HIVE tribal sites using coinzilla ... but I may be wrong.

But, who would have thought that a crypto ad network might deliver malicious code? Isn't crypto the goodguy and Web 1.0 the bad guy?