On another thread, it was noted that the stamps were not cancelled. Indicating that it was not the Post Office which delivered that package to the mail room.
Stamps are not cancelled, and I’d be surprised if that is sufficient postage. Not being able to weigh the contents, I can’t say for sure, but the fake bomb looks like it might be heavy.