just convert the mongo doc to js object

const data = (await User.create(newUser)).toObject();

then you can delete it

delete (data as any).password;