Got this in the mail today, never ordered it

Last night i saw i got a email saying my package was almost here, i figured it was a scam and ignored it. When i woke up this morning my partner said she signed a package that was in my name. I opened it up and its called a “onespan digipass@go 6” it looks like some sort of authentication number generator/step counter but im super freaked out since i didnt order it

called email mail name onespan package partner privacy scam today