Re: But which app is the bad one?
I've got ZXing installed and not seen this, it's still on the play store and was last updated in 2018, so my guess is people just searching for Barcode Reader to leave bad reviews and not noticing it's a different publisher to the one they had (particularly as the malicious one has been removed).