NickciufiIMA , thanks for reporting the issue, and yes, it is still able to repro in 15.9.2. New SSDT which includes the fix will be released before mid of Oct. For now, either you can remove the expression or update the package code to:
<?xml version="1.0"?>
<DTS:ConnectionManager xmlns:DTS="www.microsoft.com/SqlServer/Dts"
DTS:ObjectName="MDM Destination-Oracle"
DTS:DTSID="{xxxxxxxx-3832-412F-A2BE-D7EF1AA2FE9A}"
DTS:CreationName="MSORA">
<DTS:ObjectData>
<OracleXMLPackage>
<OraConnectionString>SERVER=[ServerName] ;USERNAME=[UserName];ORACLEHOME=;ORACLEHOME64=;WINAUTH=0</OraConnectionString>
<OraRetain>False</OraRetain>
<OraInitialCatalog></OraInitialCatalog>
<OraServerName>SemarchyDEV</OraServerName>
<OraUserName>SEMARCHY_MDM</OraUserName>
<OraOracleHome></OraOracleHome>
<OraOracleHome64></OraOracleHome64>
<OraWinAuthentication>False</OraWinAuthentication>
<OraEnableDetailedTracing>False</OraEnableDetailedTracing>
<OraPassword
Sensitive="1"></OraPassword>
</OracleXMLPackage>
</DTS:ObjectData>
<DTS:PropertyExpression
DTS:Name="Password">@[$Project::mdm_password]</DTS:PropertyExpression>
<DTS:PropertyExpression
DTS:Name="ServerName">@[$Project::mdm_server]</DTS:PropertyExpression>
<DTS:PropertyExpression
DTS:Name="UserName">@[$Project::mdm_username]</DTS:PropertyExpression>
</DTS:ConnectionManager>
Thanks.