Good question. I didn’t do anything to install it. Just started getting the emails out of the blue. No updates shows up on the web UI either.
Is there something I can run via SSH to remove the package or list what dependency is causing it to get installed?