For later versions of Tedious (13.4+) you will be required to add clientId and tenantId to the authentication parameters & create an App Registration under EntraId in Azure with a configuration as outlined at these links:

https://github.com/tediousjs/tedious/issues/1415#issuecomment-2646068015

https://techcommunity.microsoft.com/blog/azuredbsupport/investigating-issue-security-token-could-not-be-authenticated-after-upgrading-to/3889880