This is an interesting Dutch post where programmer Tim de Hoog discovers that JavaScript to mine bitcoin is inserted into blog posts on a site he manages. It was thanks to the dashboard audit log of simple history that the script was detected.
CryptoNight mining discovered in WordPress post thanks to Simple History