diff --git a/src/node_modules.cc b/src/node_modules.cc
index cfb6090d27ac6f..9217b94852e33b 100644
--- a/src/node_modules.cc
+++ b/src/node_modules.cc
@@ -153,6 +153,10 @@ const BindingData::PackageConfig* BindingData::GetPackageJSON(
       return throw_invalid_package_config();
     }
 
+    // based on coverity using key with == derefs the raw value
+    // avoid derefing if its null
+    if (key.raw() == nullptr) continue;
+
     if (key == "name") {
       // Though there is a key "name" with a corresponding value,
       // the value may not be a string or could be an invalid JSON string