that's a suspicious package

from here

i really shouldn't be surprised that something essentially equivalent to "you've got mail" is being used as a lure to get people to open malware-laden emails.