The animatecss-tailwind-helper package version 2.0.6 is part of a malicious campaign involving fake job interview lures. It is a Tailwind CSS plugin that depends on a private scoped package only accessible with a committed npm token, which delivers malicious code when the plugin is loaded. The public tarball itself contains no install scripts or network code, and the payload resides in the private dependency. Multiple similar malicious packages were published under various accounts over a period of months. The shipped files do not include installer secrets, network communication, or persistence mechanisms.