1. A system for detecting unusual code operating in a browser, comprising: a processor to: determine that a block of code is running on a web page; parse the block of code into a parsed template; obtain indicia associated with the block of code; and determine that the parsed template is unusual based at least in part on the parsed template and the indicia, comprising to: determine whether a misconfiguration issue exists, comprising to: determine whether a number of reports for a script associated with the block of code is equal to or exceeds a minimum count threshold, the minimum count threshold being 100; and in response to a determination that the number of reports for a script associated with the block of code is equal to or exceeds the minimum count threshold: determine whether a portion of IPs with the block of code is equal to or exceeds a minimum percent of users, the minimum percent of users being 50 percent: in response to a determination that the portion of IPs with the block of code is greater than or equal to the minimum percent of users: determine whether the script is not a known malware script; and in response to a determination that the script is not a known malware script, determine that a script misconfiguration exists; and in response to a determination that the portion of IPs with the block of code is less than the minimum percent of users, omit determining that the script misconfiguration exists; and a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions.