For some reason, it seems that when we don't pass in a checksum, chocolately automatically attempts to validate the checksum of the newly downloaded file against the checksum of the previous package stored in the cache in our sources.

Because we don't want to force all packages to ignore checksums, we could add $env:ChocolateyIgnoreChecksums = $true to the top of the code (inside the try-catch) and this will act as if we set --ignore-checksums for the specific package, allowing it to install correctly.

After looking into this in more detail, I realized that the issue is that we decreased the package version in https://github.com/mandiant/VM-Packages/pull/980/files#diff-cd5b9fb4bd04587cd2bc3389242f3113457aee36bf55f78267b859a0a3dde504 and didn't delete the higher versions from MyGet. This was causing that we were installing still the older version, for which the hash verification eventually broke.

I have fixed this issue by deleting the higher versions:

I am now able to install it without issues:

@emtuls did you want to add this package to the default config? 🤔