Could the alias have been included in version 2.6.0 by default?

2.6.0, or the current 2.7.0 : make use of the fact that it is open source so look for yourself in this folder, the GUI web root folder : https://github.com/pfsense/pfsense/tree/master/src/usr/local/www : there is no /pfblockerng/ folder - neither the PHP file in that folder : pfblockerng.php (ok, this is quiet obvious).

Also, when pfblockerng is installed, there are no DNSBL feed or IP feeds activated, they have to be selected and downloaded first.
When you install pfblockerng, it does nothing, it has to be set up first.

Still, I'm curious. To be sure, I would have to get a copy from a non infected source : https://www.pfsense.org/download/ and see what I find in the aliases when done. That's .... hum..... to much work

I have no idea, I've only been using pfsense for a short time and I started from version 2.6.0
Could the alias have been included in version 2.6.0 by default?

I'll proceed to delete it, thanks

What I do? do I delete the line?

You have to.
If "pfblockerng" isn't installed, this alias line doesn't make any sense : it's using an URL that doesn't exists on your pfSense.

But I have never installed pfblockerng .

How you got this alias then?

This line appears in aliases. But I have never installed pfblockerng . I started from pfsense version 2.6.0 and upgraded to 2.7.0

What I do? do I delete the line?

https://127.0.0.1:443/pfblockerng/pfblockerng.php?pfb=pfB_PRI1_v4

Have a look at your aliases ( Firewall >Aliases > All ).

pfSense "doesn't know" what "pfblockerng" is unless you had it installed, in the past, so your looking at some leftovers I guess.