Usually, when you find that you're seeing software being deployed, this means that software distribution is usually turned on in one of your scan templates.
If this is turned on and you're doing auto-deployments, this would cause 3rd Party software to deploy from Protect.
Also, if you're using any patch groups, make sure that you don't have an patches that end with the letter 'N' as this would indicate a software distribution patch.
Here is the guide for Software Distribution best practices. Ivanti Patch for Windows Servers Software Distribution Best Practices And Informational Guide