The Atlassian Marketplace Security team should be communicating to you about this problem via a Jira issue. You can comment directly on that issue to discuss the best way to resolve the problem.
Please let me know if I’ve misunderstood what is going on!