I've just realized, if you don't want your code to be used for commercial purposes, instead of using the GPL, just claim your project has a critical risk vulnerability.
Depends on the use, but there are a lot of cybersecurity regulations that apply to regular companies and this is only getting stricter as time goes on.