I seem to remember that people on Tor recommend to not open a package you are not expecting. Do so only after a period of time passes.

(of course the idea was to use the latter when you are expecting something illegal)