Yes, I believe QR codes infected with malware constitute a new concern. When you scan the code, a malicious code will record information about your wallet which can be used to commit fraud. Scanning should be done with care.
Wow, I never realized this myself if it turns out that fraudsters have been able to create fake QR codes that can scan all the information of other people who scan their codes, this is really scary because fake QR codes and real ones are indistinguishable.