It's a bomb, y/y?
I haven't touched it, too paranoid. My SO is going to look at it when he gets home but we'll probably call the cops, if it's not a bomb they can return it to whoever it belongs to if there's identification in it. Are we being too paranoid?
Edit: We won't call the cops if it doesn't seem odd once the boyfriend gets home, but talking to him more, he'd rather take a look at it first. I'll update once he's home, etc.