Downloading .pkg files from unofficial "ROM" or "Mirror" sites carries significant risks, including malware , potential account bans from the PlayStation Network, or bricking your console.

If you understand the risks and possess a compatible jailbroken system, here is the technical workflow for locating and downloading PS4 PKG files.