It’s a shame the plugin developer does not fix this but the simplest option, for now, is to go to widgets then open the Recent posts extended plugin’s widget options and you will see there an input field called ‘Default Thumbnail’ where the placehold.it link is shown. You can either correct the link to https or leave it blank to disable it.