Since the hackers have access to the adguard plugin, they can just test and adjust until their code passes.
And they can even make it dynamic.