The ampersand character needs to be unescaped in the returned data from the package server.