The fix is to remove the package…

And to scan all of the other packages for phoning home without very explicitly informing the user about it and kicking them out if they don't.