tea.xyz

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 14, 2025

Last Seen

November 14, 2025

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Reclassified: no validated appearance in last 90 days (enrichment cleanup 2026-07-21)

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

Over 150,000 Malicious npm Packages Flood Registry in Token Farming Attack

Nov 15·5 sources

Over 150,000 Malicious npm Packages Linked to Token Farming Campaign Detected

Nov 15·4 sources

Related Entities

Supply Chain Attack Tea.xyz Token Farming Campaign Shai-hulud Npm Registry Tea.xyz Protocol Npm

tea.xyz

IOC Validation

Pivot to external tools

Related Clusters (2)

Over 150,000 Malicious npm Packages Flood Registry in Token Farming Attack

Over 150,000 Malicious npm Packages Linked to Token Farming Campaign Detected

Related Articles (4)

150,000 Packages Flood NPM Registry in Token Farming Campaign

Crims flood npm with 150K+ junk packages to farm TEA tokens

Crims poison 150K+ npm packages with token

Amazon Inspector detects over 150,000 malicious packages linked to token farming campaign

Related Entities