I am still receiving updates on F42, but I thought it was already EOL. Are these legitimate update or have I been hacked?
The revised EOL date is 27 May 2026, so you have a couple more days of updates 
Yes it is legit. Not hacked. The release date of fedora was a week or two later as planed. Now the EOL also got some more time as @pg-tips mentioned.