Which Models Are Our Models Built On? Auditing Invisible Dependencies in Modern LLMs