The links were listed in a public court filing. It's not like they were sent by Baskervill (the prosecutor) via an encrypted Telegram message from a burner phone bought by someone in another country and sent to Baskervill via courier pigeon.

Journalists did their job by constantly checking the sources they had without dealing directly with the prosecutor. Looks like NYT was sleeping on this and WaPo made the break.