Once published, a module effectively cannot be removed as it remains cached on the go mod proxy server. This serves to prevent people from breaking other people’s code by making a public module unavailable.
What you can do is to use the retract command to mark the published version as retracted. Developers would then know to not use that module version in their code.