My understanding is: you can't unpublish an existing package, like in npm's leftpad situation. You do have a one hour window to change or revert a published version of a package, after that the published version is read-only.

Docs: https://hex.pm/docs/publish