My Trezor Safe 5 is brand new. I sent a btc transaction from coinbase to the Trezor. However when I open trezor suite lite and view the transaction there is a "from" and "to" section. When i click from, it shows the address it came from(coinbase). When I click "to", it shows the address that coinbase sent to(my trezor wallet), but whats concerning me is it also shows 26 other btc receiving addresses. Why? Is my device compromised? This is the only transaction Ive done so far. Also, is it normal to still show receiving/pemding after 40 minutes?
Your addresses are mathematically derived from your seed, those words you saved in a piece of paper.
in fact, all your addresses already existed even before you bought your wallet. What tour trezor did was to safely generate the private key to spend from those addresses.
In mastering bitcoin you can read more.
https://github.com/bitcoinbook/bitcoinbook/blob/develop/ch05_wallets.adoc