@Victorsigmoid I cleared it and the malicious default list got restored. You can disable use of the list entirely with the .enabled pref, but I want to know what process is causing the list to be restored.
@dalias @Victorsigmoid also, the data source is https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/addons-manager-settings/records - but it's a bit nasty i had to look through the source code to even find it