GitLab team member here.

We're actively working on mitigating this spam attack: https://twitter.com/gitlabstatus/status/1358777539624198145