The Postal Service is reminding employees and contractors to beware of brushing scams, which can lead to identity theft, compromised accounts and increased spam.

Brushing involves sending merchandise to people who did not order it.
...
These fraudulent deliveries appear to be harmless, but they may indicate that cybercriminals have access to the recipient’s name, address and phone number. Once this personal information is online, it can be used for various crooked enterprises.
...
Do not scan any QR codes on the packages because this can install malware on your device.

Does this also meaning we have to be cautious scanning any QR codes?