Jenkins Plugin Installation Manager Tool 2.1.3 and previous versions does not verify plugin downloads.
jenkins installation manager tool