The hash comes from the source of the package, and in this attack that source was compromised. The malicious code was signed.