Is that a photo of the real item that was sent?
That electronic device looks like one of those cheap, stick-on clocks. If so, and if the person who made it wanted to injure the recipient, what time would he set if for? If that’s a timer, it doesn’t make sense. There’s no way to know exactly when the recipient would take it out of the envelope. Any time afterwards, and bomb technicians would secure it and the recipient’s safety.
Unless the device were built to be ignited when unwrapped, it’s either a fake (possibly a hoax) or an effort to simply harass...or something made by a moron.
It ls clearly a hoax bomb. Not meant to explode. It’s just meant to scare.