Cryptojacking scripts that mine Monero via JavaScript code can also run inside Word files, security researchers have discovered.