Fetching from the wire…
Public story · 2026-07-19 · high
Simon Willison found 563 Rust filenames in the binary, tracing the swap to a June 17 update.
Why now: Willison verified Sumner's claim independently on July 19, three days after the Zig-vs-Bun "unreviewed slop" backlash first broke on July 16.
Claude Code has shipped a Rust port of Bun since June 17, according to independent verification from Simon Willison.
That's a full runtime swap sitting inside one of the most widely used coding agents. It ran undetected for a month before anyone checked.
Jarred Sumner made the claim first. Willison verified it independently on July 19 by running strings on the Claude binary, which surfaced 563 Rust source filenames.
A TypeScript preload query went further. It returned an embedded Bun v1.4.0, ahead of the v1.3.14 build that was public at the time. That version has since landed as a canary release, available through bun upgrade --canary.
The visible effect is small. Startup got roughly 10% faster on Linux, and nothing else changed that users would notice.
That timing matters. Three days earlier, a separate backlash had branded agentic Zig and Bun rewrites "unreviewed slop."
This is the counterexample. A rewrite at comparable scale ran in production for a month. It took someone running a string search on a binary, out of curiosity, to catch it.
Most users have no way of knowing what's running inside the tools they depend on until someone checks.
What to watch: whether Anthropic or the Bun team ever confirm the swap directly. And whether other embedded dependency versions in the dev tools people use are quietly ahead of what's public too.
Each link below shares sources, entities, or timing with this story.
Same source
Cite the same source (Simon Willison / Jarred Sumner (bun.com)).
Same source domain
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).
Reported by the same outlet (simonwillison.net).