Authenticator was granting session tokens left and right, but the bug has now been fixed.
Brief · Source report
Critical Microsoft Authenticator flaw let malicious Android apps steal access to your precious accounts

Brief · Source report

Authenticator was granting session tokens left and right, but the bug has now been fixed.