IANAL, but is that seriously a legal risk? The guy would have to explain he stole it.
So you'd have to admit to a felony to sue or press charges against box maker. Second when committing a felony, in many jurisdiction the felon is automatically on the hook for any further 'bad things' that happen during the crime up to and including deaths. So if the felonious package thief got in an accident while opening a stolen package, it could all fall on them as a matter of statute in many places.
There is nothing about his project designed to cause any bodily injury. This is a very important detail.