There's the list of targets we know about: https://cdn.occrp.org/projects/project-p/#/

And the Guardian has some in-depth reporting going on. https://www.theguardian.com/news/series/pegasus-project

None of this really answer how prevalent the spyware is, though.