Carolyn Grabill Damp
Carolyn Grabill Damp
This is not a good place to submit a security bug. Please check out https://trust.salesforce.com/en/security/responsible-disclosure-policy/ for guidelines to submit.
Since the package is unmanaged, the metadata components would need to be manually deleted from the organization.