Hackers have injected hundreds of websites running the Drupal content management system with malicious software used to mine the cryptocurrency monero.