The animatecss-tailwind-presets npm package versions 1.0.0 and 2.0.3 are linked to a malicious campaign involving a private dependency that delivers malicious code when the plugin is loaded in Tailwind CSS configurations. The public package itself contains no direct installer-facing malicious behavior, but it requires a private scoped package that is not publicly accessible and contains the actual payload. Multiple related packages were published under different accounts over a period of several months.