Spectrum injects JavaScript into unsecured webpages to show copyright notices
gist.github.com
gist.github.com
Other ISPs like Comcast have done this in the past[1], but this is the first time I've seen anything like it from Spectrum, who normally keeps their hijacking limited to ad-riddled search pages for failed DNS lookups.
I use HTTPS Everywhere[2] and rarely visit sites delivered over HTTP, so I can't say if this is happening only on unsecured pages or everywhere.
[1] "Comcast injects JavaScript into webpages to show copyright notices to customers" https://news.ycombinator.com/item?id=10592775
[2] "HTTPS Everywhere" https://www.eff.org/https-everywhere