Obvious and poorly disguised malicious script is obvious. Base64 strings unpack to "https://checkout.pay.g2a.com/qr/generate?address=3QWcFLByXs3Av32z8BzzC66AppcYuQUARQ&amount=0.05" and the BTC address contained within. Unminifying the script shows that it simply switches out a preexisting QR code for the one contained in the encoded string.