According to the analysis by Mike Kuketz
the (most?) problematic commit is of 2015-04-20
This would mean, that users of stable were less (not?) affected.
I would remove the plugin anyway, just because of "trust issues".
Teacher: "Now, if give you five apples, and then take three of them away, what
are you left with?"
Pupil: "Trust issues."
Pkg-mozext-maintainers mailing list