Package still get installed after hash check failed

[gengen1988]

I believe hash checking prevents the man-in-the-middle attack. A package failed in check may injected with malware and should not be install.

[r15ch13]

It doesn't get installed. The error message shows up because scoop has already created an empty directory and the check if it's installed gets it wrong. This a bug.

[niheaven]

Fixed in #4650