i keep getting spammed with verification codes

Someone likely knows your password and is repeatedly attempting to sign in, triggering the codes. Change your password immediately, then enable passwordless sign-in at https://account.microsoft.com/security (https://account.microsoft.com/security) to remove the password entirely
https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-phone