Received a Package I Didn't Order with a USB Drive Inside – Could This Be a Security Threat?

I got home yesterday to find a small package on my doorstep that I never ordered or had any tracking info for. Inside was just a plain USB drive with no label or note. I haven’t plugged it into any of my devices yet because I’m worried it might be some kind of malware or hacking attempt. I work from home and handle sensitive client info, so I’m extra cautious about security. I've read stories about USB drops being used to infect computers, but I’m not sure what the safest approach is here. I want to figure out if this is a prank, a mistake, or a real threat. Has anyone else experienced receiving mysterious USB drives out of the blue? What steps did you take to check if it was safe or to protect your data? Would just plugging it into a disconnected or older device to scan it be a better idea, or should I just dispose of it somehow? Also, should I report this to my workplace’s IT or local authorities? What’s the best way to handle this without risking my work or personal info?