The idea of this sort of thing being dealt with in private makes be a little queasy; I'm not sure how you avoid things getting ugly (though I suspect that having a clear procedure to follow would actually help), but there does need to be transparency.
Praise in public, reprimand in private.
Applications from <insert dev name here> have been removed from Extras. A bug was found that permitted premature apps to get promoted before their time. The Dev has been contacted and will be able to re-submit these in the near future.