I know this has been a little scary for you, but it has made for some great reading how you've methodically gone about trying to figure out who sent you the package.
It is telling that XH has helped you with trying to get it figured out. At the very least you know he still cares about you.