It does. The compromised extension was published about 11 hours before Binance's coins went zoop, Binance blamed a compromised developer laptop, and OP pointed out that their hiring page explicitly notes developers will be using Cursor with Claude Code for "development efficiency".

It lines up and fits so well that it'd scare me more they wouldn't be related than if they were. At least we'd know the vector.