I'm not so sure the NYTIMES is really in that much legal jeapordy here. What they did was morally wrong, but (since they aren't an authorized recipient of classified information) I don't think the law covering unauthorized disclosure applies. If the press can learn about it, then they can report it. Of course that doesn't make it "right" for them to do it, but I don't think it is necessary illegal for them too.
The person who divulged the info to the NYTIMES, however, signed an oath and is subject to the law. That person is toast if they catch him.