The animatecss-tailwind-plugin version 2.0.6 is a malicious Tailwind CSS plugin linked to a fake job interview campaign. It includes a private scoped dependency that requires an npm token to access, which delivers malicious code executed when the plugin loads in tailwind.config.js and the development server starts. The published package itself contains no install scripts or network code, and the malicious payload resides in the private dependency. Multiple similar malicious packages were published under various accounts over a recent period.