More than 250 regional and national newspaper sites in the US have accessed malicious JavaScript that is being created by an actor known as TA569, the email security firm Proofpoint claims.