# Permanent Disablement

**URL:** <https://discourse.mozilla.org/t/permanent-disablement/148273>\
**Category:** Add-ons\
**Tags:** add-on-reviews\
**Created:** [May 12, 2026, 9:23pm UTC](https://discourse.mozilla.org/t/permanent-disablement/148273 "2026-05-12T21:23:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![antoinette](https://avatars.discourse-cdn.com/v4/letter/a/6a8cbe/32.png) [@antoinette](https://discourse.mozilla.org/u/antoinette)\
**Post date:** [May 12, 2026, 9:23pm UTC](https://discourse.mozilla.org/t/permanent-disablement/148273/1 "2026-05-12T21:23:17Z")

</div>

Hi Mozilla Add-ons team,

My Firefox extension was disabled after AMO detected an unsafe and potentially malicious code that was generated by AI, not reviewed and submitted. I understand why that would be treated seriously.

I removed the offending code, rebuilt the extension, validated the new XPI, and resubmitted. The corrected build now appears to be automatically blocked, and the appeal link from the AMO activity/notification becomes unavailable after refresh.

I am not trying to bypass enforcement or repeatedly resubmit around a decision. I’m trying to find the correct appeal/review path for the corrected version.

Could someone please confirm:

1. Whether this add-on is eligible for appeal or manual re-review.
2. Whether the “appeal unavailable” page is expected or an AMO bug.
3. What information I should provide privately to help the reviewer verify the remediation.  
Details:

- Add-on name: Streetli Tools
- Add-on slug/listing URL: [https://addons.mozilla.org/en-US/developers/addon/32e89d2d89f04dad90e0](https://addons.mozilla.org/en-US/developers/addon/32e89d2d89f04dad90e0)
- Add-on GUID / ID: [streetli-android-selfhosted@doobneek.org](mailto:streetli-android-selfhosted@doobneek.org)
- Corrected version: 5.9.272
- Submission date: May 12, 2026
- AMO validation result: corrected XPI not yet confirmed by AMO after rebuild; local package checks passed
- XPI SHA256: D63B67412525FAC82B02675D4718B020089AB26C74420F4C452BB44E9BFB5853
- Source ZIP SHA256: F41576ECBD6E71130DB3FEDD74A653D7B111B256FEF9A74D45321A3B90A86CCA

I can provide the cleaned XPI, source ZIP, and a diff showing the removed code privately. I’d prefer not to post the removed unsafe string/code publicly.

Thank you.

---

<div class="post-metadata">

**Author:** ![mozchris](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/mozchris/32/76781_2.png) [@mozchris](https://discourse.mozilla.org/u/mozchris)\
**Post date:** [May 18, 2026, 9:33am UTC](https://discourse.mozilla.org/t/permanent-disablement/148273/2 "2026-05-18T09:33:24Z")

</div>

We are tackling this through private messages, so we could archive that message.