I'm definitely not the first to put the EICAR test string in a QR code and put it on stuff, but in my defense, after a few gainfully employed cybersecurity friends' rants about people scanning random QR codes on things, I Had To. Shirts over here at Threadless.