Can you please look into the firefox config option social.remote-install.enabled and see if it should be disabled by default in the Tor Browser? Currently it is set to true.