There’s the possibility of civil damages if it amounts to defamation, but that’s quite a standard to reach. Such damages would fall on the publisher of the story, the NY Post, but not a platform like Twitter (per section 230 safe harbor immunity). There is no legal gray area here.
This is the same reason why those who publicized the now widely rebuked Steele Dossier are not facing legal consequences for it (including Twitter), nor should they.
Of course your original comment said nothing about the accuracy of the reporting and instead only made the claim that there was a legal gray area around publishing hacked materials like these, which is simply not true.