I got the same event, but declining the invite was not the best action. The decline basically let the spammer know that the iCloud account is active. For those who received it that haven't done anything yet, move the event to a junk calendar and then delete the junk calendar.
Or contact Apple first. They are taking screenshots of this and sending it to engineers.