Installing gpsea via pip is not available

[TheWildParamecium]

Good morning @pnrobinson @ielis

I am trying to install the gpsea package using pip for a project, but it seems to be currently disabled, as pip returns the following error:

“ERROR: No matching distribution found for gpsea”

When I go to the relevant pip webpage for the package (https://pypi.org/project/gpsea/), it says “This project has been quarantined (...).”

I do not know if you are already aware of this issue and are trying to fix it, but as I can see that you are both actively maintaining the project, I am leaving the issue here in case you weren’t aware of it.

[ielis]

Hello @TheWildParamecium
thanks a lot for opening the issue!

Yes, the issue is a result of a recent malware campaign that also targeted some bioinformatic libraries, including gpsea. The malware tried to bundle malicious payload into the package and publish the package as a new release (gpsea==0.9.14). The release has been, however, contained by PyPI and we are in the process of making gpsea available on PyPI again.

However, until that happens, it is always possible to install gpsea directly from GitHub:

python3 -m pip install git+https://github.com/P2GX/gpsea.git@v0.9.13

This will install the commit that corresponds to the version 0.9.13 published in January 2026 (see all release tags here) - the last "official" release. The commit includes Python code only (no malware payload mentioned in the campaign blog post) that we checked in and then published to PyPI as gpsea==0.9.13. Therefore, the code is as safe as the code that you would have installed from PyPI with python3 -m pip install gpsea and this is our recommendation until the PyPI issue is resolved.

I hope this helps and thanks again for letting us know!