/who has given away multiple bases on my server an i was wonder if there is a way to get rid of it. mayb negative perms I dont know.
/who is not a default Pocketmine command. You could remove the plugin that adds the /who or create a plugin that removes the command after it is registered.