[Yokohiii]

From what I understand they've wrote the poisoned payload directly to the file system where they've expected another package exists. You only need to know what hash is going to be created.

[KajMagnus]

How do you know the hash in advance?