GHSA-78p3-96hc-3j47: Malicious Package in jquery-airload

The vulnerability involves malicious form-field enumeration and data exfiltration, which aligns with the core functionality of a jQuery plugin like jquery-airload. The attack would require intercepting DOM elements and sending HTTP requests, which would logically be implemented in the plugin's main function (jQuery.fn.airload). Since the advisory explicitly states the behavior occurs when the package is executed in the browser, and no other functions are mentioned, the plugin's entry point is the most likely candidate. The confidence is high because the described attack directly corresponds to the plugin's purpose of handling DOM/content interactions.